# CVEs published 2016-08-31

13 CVEs were published on August 31, 2016: 0 critical, 0 high. Days are UTC.

- [CVE-2016-5674](https://cve.now/CVE-2016-5674.md): \_\_debugging\_center\_utils\_\_\_.php in NUUO NVRmini 2 1.7.5 through 3.0.0, NUUO NVRsolo 1.7.5 through 3.0.0, and NETGEAR ReadyNAS Surveillance… (no CVSS)
- [CVE-2016-5675](https://cve.now/CVE-2016-5675.md): handle\_daylightsaving.php in NUUO NVRmini 2 1.7.5 through 3.0.0, NUUO NVRsolo 1.0.0 through 3.0.0, NUUO Crystal 2.2.1 through 3.2.0, and… (no CVSS)
- [CVE-2016-5676](https://cve.now/CVE-2016-5676.md): cgi-bin/cgi\_system in NUUO NVRmini 2 1.7.5 through 2.x, NUUO NVRsolo 1.7.5 through 2.x, and NETGEAR ReadyNAS Surveillance 1.1.1 through… (no CVSS)
- [CVE-2016-5677](https://cve.now/CVE-2016-5677.md): NUUO NVRmini 2 1.7.5 through 3.0.0, NUUO NVRsolo 1.0.0 through 3.0.0, and NETGEAR ReadyNAS Surveillance 1.1.1 through 1.4.1 have a… (no CVSS)
- [CVE-2016-5678](https://cve.now/CVE-2016-5678.md): NUUO NVRmini 2 1.0.0 through 3.0.0 and NUUO NVRsolo 1.0.0 through 3.0.0 have hardcoded root credentials, which allows remote attackers to… (no CVSS)
- [CVE-2016-5679](https://cve.now/CVE-2016-5679.md): cgi-bin/cgi\_main in NUUO NVRmini 2 1.7.6 through 3.0.0 and NETGEAR ReadyNAS Surveillance 1.1.2 allows remote authenticated users to… (no CVSS)
- [CVE-2016-5680](https://cve.now/CVE-2016-5680.md): Stack-based buffer overflow in cgi-bin/cgi\_main in NUUO NVRmini 2 1.7.6 through 3.0.0 and NETGEAR ReadyNAS Surveillance 1.1.2 allows… (no CVSS)
- [CVE-2016-7118](https://cve.now/CVE-2016-7118.md): fs/fcntl.c in the "aufs 3.2.x+setfl-debian" patch in the linux-image package 3.2.0-4 (kernel 3.2.81-1) in Debian wheezy mishandles F\_SETFL… (no CVSS)
- [CVE-2016-7119](https://cve.now/CVE-2016-7119.md): Cross-site scripting (XSS) vulnerability in the user-profile biography section in DotNetNuke (DNN) before 8.0.1 allows remote… (no CVSS, DotNetNuke.Core)
- [CVE-2016-5332](https://cve.now/CVE-2016-5332.md): Directory traversal vulnerability in VMware vRealize Log Insight 2.x and 3.x before 3.6.0 allows remote attackers to read arbitrary files… (no CVSS)
- [CVE-2016-5333](https://cve.now/CVE-2016-5333.md): VMware Photos OS OVA 1.0 before 2016-08-14 has a default SSH public key in an authorized\_keys file, which allows remote attackers to… (no CVSS)
- [CVE-2016-5335](https://cve.now/CVE-2016-5335.md): VMware Identity Manager 2.x before 2.7 and vRealize Automation 7.0.x before 7.1 allow local users to obtain root access via unspecified… (no CVSS)
- [CVE-2016-5336](https://cve.now/CVE-2016-5336.md): VMware vRealize Automation 7.0.x before 7.1 allows remote attackers to execute arbitrary code via unspecified vectors. (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2016-08-31
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.